GCash Ditches SMS OTPs: Now Delivers In-App OTPs per BSP Directive
.gif)
Following the Bangko Sentral ng Pilipinas’ phase-out of SMS OTPs, GCash will now send OTPs in-app.
 |
| File Photo: GCash app |
SMS OTPs are being phased out
Starting March 24, 2026, GCash will stop sending one-time passwords (OTPs) via SMS and will instead deliver them directly through in-app push notifications.
This change aligns with the Bangko Sentral ng Pilipinas (BSP) directive to phase out SMS-based OTPs nationwide by June 30, 2026, due to rising risks of SIM swapping, phishing, and account takeover scams.
It should offer reduced risks of unauthorized access and accidental code sharing, and it will deliver the OTP in real-time through secure push notifications. However, partner-generated OTPs, such as those from BPI, when chasing inside the GCash app, may still arrive via SMS.
 |
| GCash phases out SMS OTPs |
How to Enable In-App OTPs on GCash?
For iOS users:
1. Go to Settings > Notifications
2. Find and tap GCash
3. Toggle on Allow Notifications
For Android users:
1. Go to Settings > Apps
2. Tap GCash
3. Select Notifications
4. Tap Allow Notifications
Once enabled, your OTPs will appear as a notification banner on your phone even when your app is closed. If you accidentally dismissed it, simply swipe down from the top of your screen to view it again in the notification center.
Users must turn on or enable push notifications to receive in-app OTPs. Turning them on may also include marketing messages, but you can manage partner promotions via Profile > Settings > Partner Notifications in the GCash app.
Users who fail to enable notifications risk temporary disruption in verifying high-risk transactions such as transfers, bill payments, or cash-ins.
This move is part of GCash's ongoing commitment to user safety under the Anti-Financial Account Scamming Act (AFASA). Experts and regulators agree that in-app push notifications are significantly harder for scammers to intercept compared to SMS.
What do you guys think?
Post a Comment